how to configure AAA Local authentication for console and tacacs authentication for vty line in switches and routers

[Senthil Murugan]

Hi - I am currently implementing AAA server (ISE) in our infra and i would like to configure in such a way that; line vty aaa can be done via tacacs server. But the console access will be only to local authentication.

Please let me know the best way to configure without losing the access.

Thanks

Senthil Murugan

[Seb Rupik]

Something like this:

!
aaa new-model
!
aaa authentication login NO-TACACS local
!
line con 0
 login authentication NO-TACACS
!

cheers,

Seb.